Swann SWIFI-SE2KIC missing authentication for critical function
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-306.
Summary
Swann Communications SWIFI-SE2KIC firmware versions through 2.0.22 lack authentication for a critical function. An attacker on the local network can view the live video feed without logging in. CWE-306 applies. The source does not report any exploitation.
Written with Claude Haiku 5.5 from the sources below · 2026-10-27
Description from the CNA
SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the local network to view live video feed without authentication.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Swann Communications | SWIFI-SE2KIC | up to 2.0.22 | — | No fix listed | CNA |
- SWIFI-SE2KIC VendorSwann Communications Affected up to 2.0.22 Fixed in — No fix listed CNA
Remediation
The sources list no fixed version for SWIFI-SE2KIC.
Written with Claude Haiku 5.5 from the sources below · 2026-10-27
Timeline
- 2026-10-13 Threatist record created from CVE-2026-107605
- 2026-10-13 Alias added: GHSA-93h7-gwhm-h5ph
- 2026-10-14 Priority changed: MEDIUM → LOW
- 2026-10-16 CISA SSVC decision points changed
References
More Swann Communications vulnerabilities
- TI-2026-71960 Swann SWIFI-SE2KIC missing authentication for critical function CVSS 4.0MEDIUM 6.9
- TI-2026-71959 Missing authentication in Swann SWIFI-SE2KIC exposes live feed snapshots CVSS 4.0MEDIUM 6.9
Sources
- CVE-2026-107605 · CVE Program
- CVE-2026-107605 · NVD
- FIRST EPSS
- GHSA-93h7-gwhm-h5ph · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences